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IN THE CLAIMS 

Please amend the claims as follows: 
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1 . (Currently Amended) In a computer system, a method comprising: 

receiving a page comprising content including one or more elements having active 
content; and 

controlling page output and any actions corresponding to at least part of the content by: 

1) interpreting at least one part of the page based on a first set of security settings^ 

the first set of security settings being based on an identifier indicating a source from 
which the page is obtained : and 

2) interpreting at least one other part of the page based on a second set of security 
settings associated with an element of the page, the second set of security settings being 
different from the first set. 

2. (Original) The method of claim 1 , wherein receiving the page includes accessing data 
received from a remote source. 

3. (Original) The method of claim 1 , wherein receiving the page includes accessing data 
received from a cache. 

4. (Currently Amended) The method of claim 1 , wherein a first action is requested in the 
content in the at least one part of the page interpreted with the first set of security settings, 
wherein a second action that is similar to the first action is requested in the content in the at least 
one other part of the page interpreted with the second set of security settings, and wherein 
controlling page output and any actions comprises, allowing the first action and disallowing the 
second action. 

5. (Original) The method of claim 4 wherein the first action corresponds to a command to 
run a first set of script, and wherein the second action corresponds to a command to run a second 
set of script. 
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6. (Original) The method of claim 4 wherein the first action corresponds to a command to 
download a first set of data, and wherein the second action corresponds to a command to 
download a second set of data. 

7. (Original) The method of claim 4 wherein allowing the first action comprises, prompting 
a user for a decision and receiving a response indicating that the action is allowed. 

8. (Original) The method of claim 4 wherein disallowing the second action comprises, 
prompting a user for a decision and receiving a response indicating that the action is not allowed. 

9. (Currently Amended) The method of claim 1, wherein a first action is requested in the 
content in the at least one part of the page interpreted with the first set of security settings, 
wherein a second action that is similar to the first action is requested in the content in the at least 
one other part of the page interpreted with the second set of security settings, and wherein 
controlling page output and any actions comprises, disallowing the first action and allowing the 
second action. 

10. (Currently Amended) The method of claim 1 wh e r e in th e first s e t of s e curity s e ttings ar e 
bas e d on an id e ntifi e r of th e sourc e of th e pag e , and wherein interpreting at least one part of the 
page based on a first set of security settings comprises, retrieving the first set of security settings 
based on the identifier, and associating the first set of security settings with the at least one part 
of the page. 

1 1 . (Currently Amended) The method of claim 10 fiirther comprising, constructing a tree to 
represent the page, and wherein associating the first set of security settings with the at least one 
part of the page includes storing data corresponding to the first set of security settings at a node 
in the tree. 



12. (Currently Amended) The method of claim 1 wherein the wher e in interpreting at least 
one other part of the page based on a second set of security settings comprises, recognizing 
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security data associated with the element, and associating the second set of security settings with 
the at least one other part of the page based on the security data. 



13. (Currently Amended) The method of claim 12 further comprising, constructing a tree to 
represent the page, and wherein associating the second set of security settings with the at least 
one other part of the page includes storing data corresponding to the second set of security 
settings at a node in the tree that corresponds to the element. 

14. (Original) The method of claim 13 wherein storing data corresponding to the second set 
of security settings comprises negotiating the second set of settings. 

15. (Currently Amended) The method of claim [[13]] 14 wherein negotiating the second set 
of security settings comprises inheriting at least one setting in the second set of security settings 
based on security information associated with a parent node in the tree. 

16. (Currently Amended) The method of claim [[13]] 14 wherein negotiating the second set 
of settings comprises receiving at least one setting in the second set of security settings based on 
security information associated with a child node in the tree. 

1 7. (Original) The method of claim 1 , wherein controlling page output and any actions 
further comprises, accessing privacy settings. 

18. (Origmal) A computer-readable medium having computer-executable-instructions for 
performing the method of claim 1 . 

19-25 (Canceled). 

26. (Currently Amended) In a computer connected to a network, a system comprising: 
browser software that interprets content received from the network, and 
a security mechanism that associates a first security zone with a first part of the content 

and associates a second security zone with a second part of the content, the security mechanism 
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being further operable to associate a first set of security settings with the first part of the content 
based on the first security zone, and associate a second set of security settings with the second 
part of the content based on the second security zone, the second set of security settings being 
different from the firs t, wherein 

the security mechanism associates at least one of the first security zone with the first part 
of the content or the second security zone with the second part of the content based on an 
identifier indicating a source on the network or the computer fi-om which the first part of the 
content or the second part of the content is obtained . 

27. (Original) The system of claim 26 fiirther comprising, a negotiator that controls the 
second set of security settings. 

28. (Original) The system of claim 27 wherein the negotiator controls the second set of 
security settings relatiye to the first set of security settings. 

29. (Original) The system of claim 28 wherein the negotiator controls the second set of 
security settings relative to the first set of security settings by having at least one setting in the 
second set be inherited fi-om a corresponding setting in the first set. 

30. (Currently Amended) The system of claim 26 wherein the first s e t of se curity settings is 
bas e d on a n e twork id e ntifi e r of a sourc e of th e cont e nt indicator indicates a website on the 
network or a file on the computer . 

31. (Canceled). 

32. (Original) The system of claim 26 wherein the second part of the content corresponds to 
an element in the content. 

33. (Original) The system of claim 32, fiirther comprising a component that detects security 
data associated with the element. 
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34. (Original) The system of claim 33 wherein the security data associated with the element 
comprises, a reference to a security zone. 

35. (Original) The system of claim 33 wherein the security data associated with the element 
comprises, a reference to a file. 

36. (Original) The system of claim 33 wherein the security data associated with the element 
comprises, a reference to a source of remote data. 

37. (Original) The system of claim 33 wherein the security data associated with the element 
comprises a string of data corresponding to at least some of the security settings. 

38. (Original) The system of claim 33 wherein the security data associated with the element 
comprises information indicating that the security settings should be determined relative to other 
security settings. 

39. (Original) The system of claim 26 further comprising, a tree of nodes constructed from 
the content, the tree mcluding a first node corresponding to the first part and a second node 
corresponding to the second part. 

40. (Original) The system of claim 39 further comprising, a negotiator that controls the 
second set of security settings. 

41 . (Currently Amended) The system of claim 40 wherein the negotiator evaluates the 
second set of securitv settings. 

42. (Currently Amended) The system of claim 40 wherein the negotiator changes at least 
one setting in the second set of securitv settings based on a rule. 

43. (Original) The system of claim 39 further comprising, at least one other node in the tree 
that is associated with security settings based on inheriting information from a parent node. 
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(Original) The system of claim 43 wherein the parent node comprises the first node. 



44. 



45. (Original) The system of claim 43 wherein the parent node comprises the second node. 

46. (Original) The system of claim 39 further comprising, at least one other node in the tree 
that is associated with security settings based on security data of a child node. 

47. (Original) The system of claim 26 wherein the second part of the content corresponds to 
a frame tag in the content. 

48. (Currently Amended) The system of claim 26 wherein the content comprises an HTML a 
HvperText Markup Language page. 

49-54 (Canceled). 

55. (Currently Amended) A markup language document, comprising: 

a first set of content associated with a first set of security settings , the first set of security 
settings being based on an identifier indicating a source on a network or a local computer from 
which the first set of content is obtained : and 

a second set of content associated with a second set of security settings, the second set of 
security settings being different from the first set of security settings. 

56. (Original) The markup language document of claim 55 wherein the first set of content 
corresponds to a page, the second set of content is included in the page, and wherein the second 
set of security settings take precedence over the first set of security settings with respect to 
determining security for the second set of content. 

57. (Original) The markup language document of claim 55 wherein the first set of content 
corresponds to a page and the second set of content corresponds to a frame element included in 
the page. 



AMENDMENT AND RESPONSE UNDER 37 CFR § 1.111 

Serial Number: 10/047,302 

Filing Date: January 14. 2002 

58-59 (Canceled). 

60. (Original) The markup language document of claim 55, wherein the markup language 
document includes a reference to a file that corresponds to at least some of the second set of 
security settings. 

61. (Original) The markup language document of claim 55, wherein the markup language 
document includes a reference to a source of remote data that corresponds to at least some of the 
second set of security settings. 

62. (Original) The markup language document of claim 55, wherein the markup language 
document includes a string of data that corresponds to at least some of the second set of security 
settings. 

63. (Original) The markup language document of claim 55, wherein the markup language 
document includes information indicating that at least some of the second set of security settings 
should be determined relative to other security settings. 
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